Root and VPS server in a private network

NogNeetMachinaal · 4. November 2022

Team,

What is the recommended approach (if any) for having 2 or more root/VPS-servers in a private network?

Ideally in such a way that one of these servers runs OpnSense/pfSense and acts as a kind of default gateway for the remaining servers?

The desired end-result is that these "remaining servers" have no direct connection to the Internet.

All traffic requires processing via the one that runs the OpnSense/pfSense firewall.

With warm regards - Will

readyfornix · 5. November 2022

That's my approach.

I ordered a Cloud vLAN 2,5 Gbit/s for all servers.

A RS1000 is running the opnsense firewall and acts as DHCP-Server/Gateway/Firewall/wireguard-server/haproxy/whatsoever.

The public network is disabled for all other machines.

NogNeetMachinaal · 5. November 2022

Zitat von readyfornix

That's my approach.

I ordered a Cloud vLAN 2,5 Gbit/s for all servers.

A RS1000 is running the opnsense firewall and acts as DHCP-Server/Gateway/Firewall/wireguard-server/haproxy/whatsoever.

The public network is disabled for all other machines.

Can you point me to any docs where such a setup is described?

I looked with the phrases cloud vlan and private IP.

But wasn't able to find any docs on this topic.

My main interest is about the vlan-part:

Is it possible to simply add another vnic without the vlan part?

Is it possible to use multiple vlans? Other then adding another vnic?

readyfornix · 5. November 2022

Just add the VLAN as a 2nd nic and disable the main nic. The opnsense itself has two nics active, the main as WAN and the VLAN as LAN.

Dealing with multiple VLANs should be similar. Either add them as additional nics to your primary opnsense or use multiple opnsense servers.